Forum Discussion

Tabish_Mirza_12's avatar
Tabish_Mirza_12
Icon for Nimbostratus rankNimbostratus
Oct 07, 2013

how to deploy F5 BIG-IP 4200 V HA Pair for Web Application

Hi, We have recently purchased pair of BIG-IP 4200V (LTM & ASM) for our https based web servers load balancing. Web servers are located in DMZ of firewall. Web serves wants to see original source IP ...
design
What_Lies_Bene1's avatar
What_Lies_Bene1
Icon for Cirrostratus rankCirrostratus
Oct 07, 2013

I think if you changed the default gateway for those specific web servers to be the F5 (and made the F5's gateway the fw) then it would work without the need for SNAT, using just a single VLAN on the F5.

Inbound: FW --> F5 VS --> Server
Outbound: Server --> F5 --> FW

If you manage the servers through the same interface and don't want that to pass through the F5, just configure some static routes pointing directly to the f/w.